Maintenance is complete- We've moved from the domain to click to read more
As part of our journey to complete our separation work and our future integration with Micro Focus, we've now updated our domain for the community. This is an interim step, which will be followed by a series of future update / improvements: - Piloting Idea boards - Refreshing the entire UI. (more to come later) - and more
Network Automation Practitioners Forum

Network automation user permission question

Trusted Contributor.

Network automation user permission question

Hello ,

we use hp na 10.20


we want to see full device configuration(password,snmp string) without "Modify Device Permission" 

is that possible. I found this note on manual.



View Full Device
View device configurations including sensitive information (for example,
passwords and community strings).
Note: The user must also have the Modify Device Permission for the device

Super Contributor.

Re: Network automation user permission question

Please try the following steps:

1. Create a User Role, View-Full-Config

    Select Command Permission, as default all options are disabled, just enable "View Device Configuration"

2. Create a User Group, View-Full-Config

    Select Command Permission:  Existing Command Permission --> Select "View-Full-Config"

     You still need to enable "Modify Device Permission", Check on All Devices.

3. Assign the user to this User Group.

Note: Modify Device Permission has to be checked but look at the Command Scripts permissions, the only thing this user can do is to view the config (including password and snmp strings)., can't take snapshot or run command scripts or enything else.

Test out if that works for you.

Hope this helps,